FineDroid: Enforcing Permissions with System-Wide Application Execution Context

摘要: To protect sensitive resources from unauthorized use, modern mobile systems, such as Android and iOS, design a permission-based access control model. However, current model could not enforce fine-grained over the dynamic permission use contexts, causing two severe security problems. First, any code package in an application granted permissions, inducing attackers to embed malicious payloads into benign apps. Second, permissions may be utilized by attacker through vulnerable interactions. Although ad hoc solutions have been proposed, none systematically solve these issues within unified framework.